Privacy Policy

ClearSplit never sells your personal data or shares it for advertising. Every U.S. resident has the same rights here, whatever state they live in: to know, get a copy of, correct and delete their data.

Who we are

ClearSplit is operated by GavelSight LLC, the controller of the personal data described here, which means it decides how that data is used. Write to us at legal@clearsplit.com. ClearSplit is offered to people in the United States only.

What we collect

Account: your email address, the name on the account, and sign-in sessions. Passwords are stored only as a one-way hash that nobody can read back.

What you enter: the information you type into the service or send to it, which stays yours.

Billing: our payment processor collects card details directly; they never reach our servers. We keep the customer number, subscription status and renewal date.

Technical data: IP address and browser details in server logs, used to secure the service and slow down repeated sign-in attempts.

Financial account data: only what you connect or enter, used only to provide the service.

How we protect your case

We implement industry-standard security measures including: HTTPS encryption for all data in transit; Per-case envelope encryption for all uploaded documents; Hashed password storage using scrypt key derivation; CSRF protection on all form submissions; Rate limiting on authentication endpoints; Security headers (CSP, HSTS, X-Frame-Options); Role-based access control with party-scoped data visibility

Bank linking

Direct bank linking is disabled in the current release. If an optional connected-account import is enabled later, the connection screen and this notice will identify the provider and the data involved before you consent.

Full retention and deletion schedule

Purchased cases stay fully active for 36 months, then become read-only archives. After we verify a deletion request, a 90-day recovery window begins; by day 90 the case records are removed and the per-case keys are destroyed in our live systems. Audit records are kept for 7 years. The complete schedule, including how backups age out, is on our Data Retention & Incident Response page at clearsplit.com/retention-policy.

Legal and Professional Notice

ClearSplit is not legal advice, not a court filing system, and does not replace review by licensed counsel. Users remain solely responsible for legal validation, regulatory compliance, and final filing decisions. Settlement calculations are informational tools only and should be reviewed by qualified professionals before any legal reliance.

What we use it for

To run the service, keep it secure, bill you, send the account emails the service needs, and comply with law. That is all. We do not sell personal data, share it for cross-context behavioral advertising, show advertising, or run third-party tracking scripts. We do not use your data to train AI models. AI models that process your requests do so as our processors, under contracts that forbid them from training on it.

Who handles it for us

Stripe takes payments and keeps payment records; Fly.io hosts the application and its database; Backblaze stores your uploaded documents, encrypted; Resend sends account and case email; Sentry receives error reports; Plaid connects bank accounts — disabled in the current release; used only if it is enabled and you choose to link an account. Each handles data only to provide its service to us, under contract, and this list is updated before anyone new is given access. We also disclose data when the law requires it, to protect rights and safety, or to a successor in a merger or sale of the business, which stays bound by this notice.

How long we keep it

Account data and what you enter: until you delete your account. Server logs: 90 days. Our payment processor keeps its own records as tax and payment law requires.

Your choices and rights

Wherever you live in the United States, you may ask to know what we hold, get a copy in a portable format, correct it, or delete it, and you may opt out of any sale, sharing, targeted advertising or profiling (we do none of these). Where the service offers it, download and deletion are self-serve; otherwise write to legal@clearsplit.com. We verify requests, answer within 45 days (extendable once by 45 days where the law allows), accept requests from an authorized agent with written authorization, never treat you differently for using a right, and if we decline you may appeal by replying to our answer.

Sensitive information

We process sensitive information only with your express, opt-in consent and only to provide what you asked for; you can withdraw consent at any time. We never sell it. We collect no biometric identifiers.

Security

Connections are encrypted and stored data is encrypted at rest. No system is perfectly secure; if a breach affects your data we notify you and the authorities as the law of your state requires.

Cookies and privacy signals

We set only the cookies that keep you signed in and protect sign-in from forgery. There are no advertising, analytics or tracking cookies. Because we never sell or share personal data, a Global Privacy Control or Do Not Track signal changes nothing: every visitor is already treated as opted out.

Adults only

The service is offered only to adults. You must be at least 18 years old to use it. We do not market to minors and do not knowingly collect personal information from anyone under 18; an account found to belong to someone under 18 is closed and its data deleted.

Outside the United States

The service is not directed to residents of the European Economic Area, the United Kingdom or anywhere outside the United States. If you use it from elsewhere, your data is processed in the United States.

Changes

We may change this notice at any time by posting the new version with a new date at the top; it takes effect when posted. For a material change we make reasonable efforts to email account holders, and any new use of data you have already given us applies only with your consent where the law requires it.

empire-legal v3.5 (2026-10-04)